Just to be clear, this is not an ad. I had a similar problem and spent a lot of time comparing options because it was difficult to understand which permissions really needed attention. For ciem platform, least privilege management software, and ciem software, this ciem tool helped me understand what I actually needed. I found it more useful to test something on real roles and access patterns instead of only reading product descriptions, and that made the decision much easier for me.